Privacy Policy

This policy explains what personal data we collect, why, on what legal basis, who we share it with and what you can do about it. It is the information required by Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679).

Who is responsible

The controller of your data is Juan Royo Fernández, of Zaragoza, Spain. For anything about your data, write to contact@bravodivision.com.

What we collect, why, and on what basis

Data	Why	Legal basis
Email address	Sending you the newsletter about upcoming drops	Your consent — Art. 6(1)(a). Withdraw it any time by unsubscribing.
Order details: name, delivery address, email, items, amount	Taking payment, shipping your order, handling returns and guarantees	Performance of the contract — Art. 6(1)(b)
Invoice and transaction records	Meeting tax and accounting obligations	Legal obligation — Art. 6(1)(c)
Aggregate traffic statistics (page views, referrer, country, device type)	Understanding how many people visit the site	Your consent — Art. 6(1)(a). Nothing is collected unless you accept in the cookie banner.

We do not sell your data, we do not build advertising profiles, and no decision affecting you is made by automated means.

Who processes it for us

This shop runs entirely on Shopify, so there is one processor rather than several:

• Shopify International Limited — the store, its hosting, the checkout, the customer and order database, the newsletter list, the order emails we send you, and the aggregate traffic statistics. Shopify acts as our processor under its Data Processing Addendum.
• Shopify Payments — payment processing, operated by the same company. It receives your payment and billing details directly; we never see your card number.
• The carrier that delivers your order — receives your name, delivery address and, where the service needs it, your phone number or email so it can arrange delivery.

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Newsletter email — until you unsubscribe or ask us to delete it.
• Order and invoice records — for as long as tax and commercial law requires us to keep them, then deleted.
• Analytics — aggregate only, and not linked to you.

Your rights

Under the GDPR you can ask us at any time to:

• confirm what data we hold about you and give you a copy (access);
• correct anything inaccurate (rectification);
• delete it (erasure), where we have no overriding obligation to keep it;
• restrict or object to how we use it;
• send it to you or another provider in a portable format;
• withdraw any consent you gave, without affecting what we did before you withdrew it.

Write to contact@bravodivision.com and we will respond within one month. You also have the right to complain to your national data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

Cookies

We use strictly necessary storage plus optional analytics you can refuse. The detail is on the Cookie Policy, and you can change your choice at any time via “Cookie settings” at the bottom of any page.

Last updated: 2026-08-31